From 944eeb7f1f7065165315756fb295d096e9de3bb1 Mon Sep 17 00:00:00 2001
From: Lee Chapman <lee@fullmetal.dev>
Date: Fri, 5 Jun 2026 13:32:37 -0700
Subject: [PATCH] fix(ci): reset broken SSL_CERT_FILE before coder install in
 GitLab

K8s runners inject CA paths missing from ubuntu:24.04; curl exits 77 without this.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .gitlab-ci.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index b5c68cb..50bb080 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -81,6 +81,17 @@ push-to-coder:
     - test:dkai-hermes
   before_script:
     - apt-get update && apt-get install -y curl ca-certificates
+    # K8s/GitLab runners may set SSL_CERT_FILE/CURL_CA_BUNDLE to a host path absent in
+    # ubuntu:24.04 — curl then fails with exit 77 (error setting certificate file).
+    - |
+      for _var in SSL_CERT_FILE CURL_CA_BUNDLE REQUESTS_CA_BUNDLE; do
+        _val="$(printenv "$_var" 2>/dev/null || true)"
+        if [ -n "$_val" ] && [ ! -f "$_val" ]; then
+          unset "$_var"
+        fi
+      done
+      export SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
+      export CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
     - curl -fsSL https://coder.dataknife.net/install.sh | sh -s --
     - coder version
   script: